• barsquid@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    27 days ago

    That’s very interesting. Once you connect something to your mesh you can access the rest of the mesh by IP? What is the gateway in that case?

    • exu@feditown.com
      link
      fedilink
      English
      arrow-up
      2
      ·
      25 days ago

      Apologies for the late response

      I can access every node by IP (IPv6 to be precise).
      Discovery within a local network happens through regular broadcasts. For connecting different networks, you need to set peering addresses that are reachable and configure the other side to listen.
      You only need one node per network though, the others will automatically discover the path and connect on the best route to their target. If your node in the middle falls over, any other node that’s reachable can be used instead. The Yggdrasil Blog posts have some explainations of the algorithms used.

      There’s no explicit gateway, but you can use standard routing and firewall tools to do whatever you want. I only use it for accessing internal stuff, not as a full VPN for my client devices, but you could probably make that work by setting one node as router and configure its Yggdrasil ip as you gateway (excluding the traffic you need to connect to the VPN).

      One downside is that everything’s still in progress and most versions change significant parts of the routing scheme, meaning it doesn’t work with the previous version. It is primarily a research tool for internet scale mesh networks, but releases are also infrequent enough where you shouldn’t worry too much.

      • barsquid@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        25 days ago

        Thank you! It sounds like a really interesting tool. I’d like to have a VPC sort of setup for my devices that I can connect to externally. I don’t think I need the mesh aspect of it, I’d likely just have one VPN act as a hub. But I’ll definitely look into this more. If it does routing for IPs a bit more conveniently that’d be worth it to me.